Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/blaZN_muHpPH6XiOsIjwTQEKgR8.roa
File: blaZN_muHpPH6XiOsIjwTQEKgR8.roa (raw, json)
Hash identifier: CH8Rwqv/hQbOJ0FALJiXivKD3IY9sCoBwnU3Br056Ig=
Subject key identifier: 6E:56:99:37:F9:AE:1E:93:C7:E9:78:8E:B0:88:F0:4D:01:0A:81:1F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FE2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/blaZN_muHpPH6XiOsIjwTQEKgR8.roa
Signing time: Tue 25 Oct 2022 01:11:07 +0000
ROA not before: Tue 25 Oct 2022 01:11:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 198949
IP address blocks: 113.196.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4066 (0xfe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Oct 25 01:11:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6E569937F9AE1E93C7E9788EB088F04D010A811F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:89:71:32:6d:81:68:33:50:51:2e:93:ee:
94:5e:ac:7d:ac:9e:bf:16:62:7a:ba:07:a5:73:16:
70:73:9f:bd:75:0f:e8:98:df:a2:31:5e:8b:db:5a:
d6:1f:89:af:55:19:9f:4e:6c:1d:34:b5:2e:40:3c:
ba:1c:99:54:03:40:bf:25:0e:3c:04:4d:06:1e:51:
14:c2:ed:9f:ae:c5:18:17:e6:09:86:d3:3a:70:08:
a5:2d:92:ac:c8:f0:1d:1d:eb:8c:6c:81:7e:24:a3:
94:14:b1:b3:f8:3b:b2:32:47:04:4f:bf:b2:4c:b4:
f3:18:23:94:21:b5:dc:a5:05:98:3f:70:1a:13:04:
92:6b:a2:7b:12:ed:76:c6:d7:09:67:45:16:dd:4d:
0d:7f:90:31:a3:6b:a4:cc:f9:17:2d:e0:d4:7f:63:
1a:98:e2:5c:7a:4a:d7:cd:52:4d:f5:89:57:ab:3b:
ac:0c:be:9e:60:b9:d4:45:04:ed:e9:1c:57:e8:33:
8e:a7:ba:57:5e:ef:ca:be:be:bc:28:01:9b:1d:e4:
bc:c6:b4:36:d4:38:01:04:6f:bd:ed:8c:3b:9d:1a:
44:30:66:c4:23:02:ba:42:69:73:5c:57:02:ce:f3:
34:ab:b7:88:41:fe:18:4e:48:db:b7:bc:99:40:bf:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:56:99:37:F9:AE:1E:93:C7:E9:78:8E:B0:88:F0:4D:01:0A:81:1F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/blaZN_muHpPH6XiOsIjwTQEKgR8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.79.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c1:80:53:53:b8:42:f9:74:f4:52:ff:0f:4c:32:78:7c:bb:
a7:ab:bc:44:4d:9a:fb:88:5e:1c:6d:c9:2c:75:2f:e3:b7:51:
75:32:15:05:ff:51:73:a3:3b:92:ed:94:2b:ac:6d:8c:c3:19:
70:b4:a8:78:66:f0:46:d1:38:ee:df:58:6b:18:4d:15:58:9c:
59:70:f7:24:8d:98:11:a3:ea:f5:2c:1d:b8:e0:d3:d3:4e:75:
8a:3a:f0:2a:1a:1d:c6:4b:ce:1d:db:74:5b:dc:b5:3e:73:ee:
1e:3b:64:82:0e:8e:70:61:ff:a0:aa:1a:4e:05:10:8d:b4:3e:
46:d1:e3:5b:1d:87:c0:43:e9:6a:51:e0:2d:ac:fd:5b:90:66:
2e:ff:17:70:4a:91:f7:d7:ea:72:bc:be:cf:e7:f9:5f:6b:c2:
9d:98:92:7f:d0:4b:b3:0e:84:28:6e:cf:4f:d7:1e:5f:bb:d1:
9f:4e:14:f9:c2:8f:a1:4c:7f:4b:fd:2f:14:b2:c7:e5:0e:16:
6c:76:7f:98:a3:88:5c:85:fc:45:47:08:41:83:1a:ba:d2:da:
5c:00:66:9c:06:bd:2a:d8:24:c5:e2:b1:66:eb:ff:87:4e:28:
a5:16:b2:92:ea:da:c7:24:91:e2:54:92:d1:0b:e0:d4:49:4a:
63:13:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:00 2023 by rpki-client on console-ams.rpki-client.org